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A SYSTEM AND METHOD FOR PREPARING, 
EXECUTING, AND SECURELY MANAGING 
ELECTRONIC DOCUMENTS 



D TECHNICAL FIELD 

5 This invention relates to electronic commerce and, more 

£ particularly, to a system and method that enables individuals to complete 

electronic forms, such as purchasing agreements, sign the electronic forms, and 

W that provides secure management of the electronic forms to prevent tampering 

O or modifying the forms once the interested parties partially or fully execute the 

0 10 electronic forms. 

1 BACKGROUND INFORMATION 

As the world of telecommunications, computer networking, and 
electronics continues to expand, the world as we know it grows smaller. Sitting 
in the glow of a computer screen, an individual can instantaneously access 

15 information on the opposite side of the planet. As computing and 

interconnected communication capabilities continue to integrate into the daily 
activities of individuals, new and useful ideas bubble up to the surface. In 
general, many of these ideas take the form of converting a task, that has 
traditionally been performed manually, into an electronic commerce process. 

20 As an electronic commerce process, transactions that once took days and weeks 



to perform through™ mail can be completed virtually instantaneously over the 
Internet or through other networking means. 

Advances in technology usually precede changes in fields and 
disciplines that are ancillary to the technology. This phenomenon is apparent 
5 in the realm of legal issues regarding electronic commerce. One example of 
this phenomenon is in the area of electronic agreements. The Uniform 
Commercial Code (UCC), drafted by the National Conference of 
Commissioners on Uniform State Laws, is directed towards providing a 
uniform body of state law governing commercial transactions. Under the UCC, 
1G a chattel paper is a written instrument identifying a monetary obligation and a 
security interest in or a lease of specific goods. In many cases, the chattel paper 
will take the form of a negotiable instrument coupled with a security 
agreement. Section 9 of the UCC sets forth that a security interest in chattel 
paper is perfected by possession. In the physical world, possession is obvious - 
15 the holder of the signed original paper is in possession of the chattel paper. 
However, in the world of e-commerce, possession is not so obvious. 

In cyberspace, where an agreement may existin^fectronic form 
(i e-dectronic chattel paper), it is difficult to deternv^vho has possession of 
an electronic chattel paper. It is an easy task for^arty to create an identical 
20 copy an electronic file and distribute that^epf to others. In this situation, it 
appears impossible to identify whiph^opy of the file is original, and thus, to 
identify who has possessior^fthe original. However, from a legal perspective, 
it is necessary to be^Ielo distinguish an original electronic chattel from a 
copy. Thuyhereis a need in the art for a technique to maintain an original 
25 authorita^Tcopy of an electronic chattel paper and to distinguish it from 
opies. 

Currently, proposals to revise Section 9 of the UCC are under 
consideration. In general, these proposals are directed towards providing that a 
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security interest Arorac chattel paper is perfected by control. The 
proposed revisions to the UCC, state that a party is considered to have control 
of an electronic chattel paper if the records comprising the electronic chattel 
paper are created, stored, and assigned in such a manner that: (1) a smgle 
authoritative copy of the record or records exists which is unique, idenhfiable 
and except as otherwise provided . . ., unalterable; (2) the authoritative copy 
identifies the secured party as the assignee of the record or records; (3) the 
authoritative copy is communicated to and maintamed by the secured party or 
its designated custodian; (4) copies or revisions that add or change an identtfied 
assignee of the authontative copy can be made only with the participate of 
the secured party; (5) each copy of the authoritative copy and any copy of a 
copy is readily identifiable as a copy that is no, the authoritative copy; and (6) 
any revision of the authoritative copy is readily identifiable as an authorized or 
unauthorized revision. Thus, there isaneed in the art forasystem and method 
to provide for the control of an electronic chattel paper that meets some or all 
of these requtrements. There is alsoaneed in the art for a system and method 
to create electronic agreements in a distributed environment, but maintam the 
ability to identify the party having control of the electronic agreement. 

Therefore, it can be seen that there is a need in the art for a system 
0 and method that enables individuals to complete electronic forms, such as 
purchasing agreements, sign the electronic forms, and that provides secure 
management of the electronic forms to prevent tampering or modifymg the 
forms once the interested parties partially or fully execute the electronic forms. 

BRIEF SUMMARY OF THE INVENTION 
25 The present invention satisfies the above-identified needs in the art 

by providing a system and method for creating and controlling electronic 
agreements. The system includes a server and at leas, one client interconnected 
through a communications medium. The system only allows access to 
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authorized users. He a user gains access, the user inputs commands and data 
that are necessary to create an electronic document. Upon completion of the 
electronic document, the user can invoke a signature process. During the 
signature process, the parties to the agreement enter electronic signatures. 
Completing the signature process results in the creation of a binding electrons 
agreement. The present invention operates to encrypt the electronic document 
and then encrypts each of the signatures using an encryption key that >s based, 
at least in part, on the contents of the electronic document. This aspect of the 
present invention prevents the propagation of fraudulent versions of the 
electronic document. Any modifications to the electronic document will result 
in destroying the ability to generate the encryption key used to encrypt the 
signatures. Thus, the signatures cannot be decrypted if the electronic document 
is modified, thereby, invalidating the electronic agreement. Finally, the system 
operates to transfer the electronic agreement to a secure server. The server 
maintains the authoritative copy of the electronic agreement, thereby provrdmg 
control of the electronic agreement. 

Therefore, it can be seen that the present invention provides a 
system and method to provide for the control of an electronic chattel paper that 
meets some or all of the requirements proposed in the modifications to the 
, UCC The present invention also provides a system and method to create 
electronic agreements in a distributed environment, but maintains the ability to 
identify the party having control of the electronic agreement. 

Advantageously, the present invention provides a system and 
method to enable individuals to complete electronic forms, such as purchasmg 
5 agreements, sign the electronic forms, and provide secure management of the 
electronic forms to prevent tampering or modifying the forms once the 
interested parties partially or fully execute the electronic forms. 
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BRIEF DESCRIPT^ OF THE DRAWINGS 

Fig. 1 is a system diagram that illustrates an exemplary 
environment suitable for implementing various embodiments of the present 
invention or aspects of the present invention. 

Fig. 2 is a system diagram that illustrates an exemplary 
embodiment of the present invention in a distributed environment. 

Fig. 3 is a flow diagram illustrating the operation of an 
embodiment of the present invention. 

Fig 4 is a state diagram illustrating the operation of an 
embodiment of the present invention in creating and managing an electronic 
agreement. 

Fig. 5 is a diagram of an opening screen for an exemplary 
embodiment of the present invention. 

Fig. 6 is a diagram of an input screen for an exemplary 
> embodiment of the present invention. 

Fig. 7 is a diagram of a document generation screen for an 
exemplary embodiment of the present invention. 

Fig. 8 is a diagram of another document generation screen for an 
exemplary embodiment of the present invention. 
, 0 Fig. 9 is a diagram of yet another document generation screen for 

an exemplary embodiment of the present invention. 

Fig. 10 is a diagram of an electronic signature screen for an 
exemplary embodiment of the present invention. 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 
25 The present invention provides a system and method for creating 

and controlling electronic agreements. The system includes a server and at 
least one client interconnected through a communications medium. Turning 
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now to the figures Hfhich like numbers refer to like elements throughout the 
several views, various embodiments of the present invention are presented. 

Fig. 1 is a system diagram that illustrates an exemplary 
environment suitable for implementing various embodiments of the present 
5 invention. Fig. 1 and the following discussion provide a general overview of a 
platform onto which various aspects of the invention may be integrated or 
implemented. Although in the context of the exemplary environment the 
invention is described as consisting of instructions within a software program 
being executed by a processing unit, those skilled in the art will understand that 
10 portions of the invention, or the entire invention itself may also be implemented 
by using hardware components, state machines, or a combination of any of 
these techniques. In addition, a software program implementing an 
embodiment of the invention may run as a stand-alone program or as a software 
module, routine, or function call, operating in conjunction with an operating 
15 system, another program, system call, interrupt routine, library routine, or the 
like. The term program module is used to refer to software programs, routines, 
functions, macros, data, data structures, or any set of machine readable 
instructions or object code, or software instructions that can be compiled into 
such, and executed by a processing unit. 
20 Those skilled in the art will appreciate that the system illustrated in 

Fig. 1 may take on many forms and may be directed towards performing a 
variety of functions. Examples of such forms and functions include mainframe 
computers, mini computers, servers, work stations, personal computers, hand- 
held devices such a personal data assistants and calculators, consumer 
25 electronics, note-book computers, lap-top computers, and a variety of other 
applications, each of which may serve as an exemplary environment for 
embodiments of various aspects of the present invention. The invention may 
also be practiced in a distributed computing environment where tasks are 



performed by remoW°cessing devices that linked thr ° Ugh * 
communications network. In a distributed computing environment, program 
modules may be located in both local and remote memory storage devices. 

The exemplary system illustrated in Fig. 1 includes a computing 
device 10 that is made up of various components including, but not limited to a 
processing unit 12, non-volatile memory 14, volatile memory 16, and a system 
bus 18 that couples the non-volatile memory 14 and volatile memory 16 to the 
processing unit 12. The non-volatile memory 14 may include a variety of 
memory types including, but not limited to, read only memory (ROM), 
electronically erasable read only memory (EEROM), electronically erasable 
and programmable read only memory (EEPROM), electronically 
programmable read only memory (EPROM), electronically alterable read only 
memory (EAROM), and battery backed random access memory (RAM). The 
non-volatile memory 14 provides storage for power on and reset routines 
(bootstrap routines) that are invoked upon applying power or resetting the 
computing device 10. In some configurations the non-volatile memory 14 
provides the basic input/output system (BIOS) routines that are utilized to 
perform the transfer of information between elements within the various 
components of the computing device 10. 
, The volatile memory 16 may include a variety of memory types 

and devices including, but not limited to, random access memory (RAM), 
dynamic random access memory (DRAM), FLASH memory, EEROM, bubble 
memory, registers, or the like. Hie volatile memory 16 provides temporary 
storage for routines, modules, functions, macros, data etc. that are being or may 
5 be executed by, or are being accessed or modified by the processing unit 12. In 
general, the distinction between non-volatile memory 14 and volatile memory 
16 is that when power is removed from the computing device 10 and then 
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reapplied, the conteftf the non-volatile memory 14 remain in tact, whereas 
the contents of the volatile memory 16 are lost, corrupted, or erased. 

The computing device 10 may access one or more external display 
devices 30 such as a CRT monitor, LCD panel, LED panel, electro-luminescent 
panel, or other display device, for the purpose of providing information or 
computing results to a user. The processing unit 12 interfaces to each display 
device 30 through a video interface 20 coupled to the processing unit 12 over 

the system bus 18. 

The computing device 10 may have access to one or more external 
storage devices 32 such as a hard disk drive, a magnetic disk drive for the 
purpose of reading from or writing to a removable disk, and an optical disk 
drive for the purpose of reading a CD-ROM disk or to read from or write to 
other optical media, as well as devices for reading from and or writing to other 
media types including, but not limited to, FLASH memory cards, Bernoulli 
drives, magnetic cassettes, magnetic tapes, or the like. The processing unit 12 
interfaces to each storage device 32 through a storage interface 22 coupled to 
the processing unit 1 2 over the system bus 1 8. The storage devices 32 provide 
non-volatile storage for the computing device 10. 

The computing device 10 may receive input or commands from 
one or more input devices 34 such as a keyboard, pointing device, mouse, 
modem RF or infrared receiver, microphone, joystick, track ball, light pen, 
game pad, scanner, camera, electronic writing pad, or the like. The processing 
unit 12 interfaces to each input device 34 through an input interface 24 coupled 
to the processing unit 12 over the system bus 1 8. The input interface may 
5 include one or more of a variety of interfaces, including but not limited to, an 
RS-232 serial port interface or other serial port interface, a parallel port 
interface, a universal serial bus (USB), an optical interface such as infrared or 
IRDA, an RF or wireless interface such as Bluetooth, or other interface. 
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The cSputing device 10 may send output information, in addition 
to the display 30, to one or more output devices 36 such as a speaker, modem, 
printer, plotter, facsimile machine, RF or infrared transmitter, or any other of a 
variety of devices that can be controlled by the computing device 10. The 
processing unit 12 interfaces to each output device 36 through an output 
interface 26 coupled to the processing unit 12 over the system bus 18. The 
output interface may include one or more of a variety of interfaces, including 
but not limited to, an RS-232 serial port interface or other serial port mterface, 
a parallel port interface, a universal serial bus (USB), an optical interface such 
as infrared or IRDA, an RF or wireless interface such as Bluetooth, or other 
interface. 

The computing device 10 may operate in a networked environment 
using logical connections to one or more remote systems, such as a remote 
computer 38. The remote computer 38 may be a server, a router, a peer device 
or other common network node, and typically includes many or all of the 
elements described relative to the computing device 10. When used in a 
networking environment, the computing device 10 is connected to the remote 
system 38 over a network interface 28. The connection between the remote 
computer 38 and the network interface 28 depicted in Fig. 1 may include a local 
, area network (LAN), a wide area network (WAN), a telephone connection, or 
the like. These types of networking environments are commonplace in offices, 
enterprise-wide computer networks, intranets and the Internet. 

It will be appreciated that program modules implementing various 
embodiments of the present invention may be may be stored in the storage 
is device 32, the non-volatile memory 14, the volatile memory 16, or in a 
networked environment, in a remote memory storage device of the remote 
system 38. The program modules may include an operating system, application 
programs, other program modules, and program data. The processing unit 12 



may access variolations of the program modules in response to the various 
instructions contained therein, as well as under the direction of events 
occumng or being received over the input interface 24 and the network 
interface 28. 

Fig. 2 is a system diagram that illustrates an exemplary 
embodiment of the present invention in a distributed environment. This 
embodiment of the present invention is described as a system and a method to 
generate and manage agreements for purchasing or selling automobiles for 
Mercedes Benz Credit Corporation (MBCC). However, those skilled .n the art 
will appreciate that this embodiment of the present invention is only one 
possible application of the principles and aspects of the present invention and 
should not limit the present invention in any manner. 

The present invention has been implemented by MBCC withm its 
MB Advantage System. The MB Advantage System includes a program 
module ("MB Advantage Software") that operates on a single, stand alone 
computer system, or on multiple computer systems that share information. 
The MB Advantage System provides several functions such as managing 
customer information, generating pay-off quotes, preparing and processing 
credit applications, and other tactions related to the purchasing and leasing of 
0 automobiles. 

More particularly, the MB Advantage Software includes two main 
components, the Server Program 1 1 5 and the Client Program 215, which are 
respectively installed and operate on a server 1 10 and a client 210. The Server 
Program 1 15 and the Client Program 215 include various software components 
, 5 that implement aspects of the present invention. The applicant collectively 
refers to these software components as the Credit Highway. In general, the 
Credit Highway allows traditional paper contracts to be replaced with 
electronic contracts. This aspect of the present invention enables retailers to 
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prepare and deliveSctronic leases and retail installment contracts, including 
security agreements, all related to the lease or purchase of an automobile. 

The server 1 1 0 operates as the central storage location for 
electronic agreements. The server may include a single computer or system or 
5 several computer systems or servers that share resources. In an exemplary 
embodiment, the server 1 10 is dedicated to the operation of the MB Advantage 
System and includes two servers operating under the Windows NT operating 
system and running the Server Program 1 15 and two servers controlling a 
central database 120. The central database contains, among other items, any 
10 electronic agreements that a user generates using the MB Advantage System. 

Each client 210 is typically located at a retailer location and 
operates as a terminal for the entry of data. Each client 210 is a networked or 
stand-alone computer and operates under the control of the Client Program 215. 
The Client Program 215 enables the client 210 to communicate with the server 
15 1 10 over a communications medium 150. Depending on the particular 
configuration of a client 210, the communications medium 150 may be an 
Internet-based connection, a dedicated or shared telephone line, a NetStar 
network connection, or other similar communication media. In an exemplary 
embodiment, the client 210 also includes display 220, a keyboard 230, and an 
20 electronic signature pad 225. 

Fig. 3 is a flow diagram illustrating the operation of an 
embodiment of the present invention. The Credit Highway component of the 
MB Advantage System enables the preparation and secure management of 
electronic agreements including leasing agreements and retail installment 
25 contracts. In general, the operation of the Credit Highway includes three 
phases: 

(a) Document Generation 302; 

(b) Document Execution 304; and 
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^^Electronic Agreement Control 306. 
The Document Generation Phase 302 involves the client 1 10 and 
the server 210. To enter the Document Generation Phase, a user must first gain 
access to the MB Advantage System from the client 210 and invoke the Credit 
Highway function. After invoking the Credit Highway function, the retailer 
operates the Credit Highway to perform several functions including selecting 
various options and entering customer data into the system. After successfully 
generating a final and executable document, the retailer may cause the Credit 
Highway to exit the Document Generation Phase 302. The retailer, utilizing 
the Credit Highway, completes these tasks by performing Steps 310, 320, and 
330 as illustrated in Fig. 3 and further described below. 

At step 310, the user gains access to the MB Advantage System. 
The MB Advantage System includes password protection to prevent 
unauthorized access. A user gains access to the MB Advantage System through 
the client 210. The Client Program 215 running on the client 210 prompts the 
user to enter a user identification and a password. The Client Program 215 
receives the user identification and password and communicates the 
information to the server 110 over communications medium 150. The Server 
Software 115 running on the server 1 10, receives and verifies the authenticity 
of the user identification and the password. If the user identification and 
password are authentic, then the Server Software 115 generates an authorized 
indicator or a Transaction Token and communicates this Transaction Token to 

the Retailer System. 

A Transaction Token received from the server 1 10 is simply a 
string of characters that are known only to the client 210 and the server 110. 
The Transaction Token remains valid until the user logs off of the MB 
Advantage System, thereby ending the session, or upon the expiration of a 
timer (typically 24 hours). Based on the user identification, the Server Program 




115 identifies the^hts and privileges of the user and associates these rights 
and privileges with the Transaction Token. Each subsequent communication 
between the client 210 and the server 1 10 during the current session must 
include this Transaction Token. Thus, the Transaction Token is used to 
validate each transaction request and communication between the client 210 
and the server 1 10. To maintain security, the user identification and passwords 
are periodically changed, such as every 30 days. Upon receiving the 
Transaction Token, the user has access to the MB Advantage System and 
processing continues at step 320. 

At step 320, the user enters document information. Initially, the 
client 210 displays an opening screen on the display 220. The opening screen 
provides a list of retailer services that the user can select. Fig. 5 is a diagram of 
a typical opening screen 500 displayed by an exemplary embodiment of the 
present invention. The user invokes the Credit Highway component by 
selecting the Credit Highway icon 510 displayed on the opening screen 500 or 
by entering an appropriate keyboard command on keyboard 230. In general, 
the entry of document information involves the user selecting various options 
or functions and entering data into the system. 

The first option that a user may select is to request either a retail or 
lease quote. Upon selecting a quote type, the Client Program 215 operates to 
determine a contract type. The Client Program 215 determines the contract 
type based on the type of quote the user requests, along with other information, 
such as the state in which the client 215 is operating. The Client Program 215 
then allows the user to select a series of input screens. Each input screen 
identifies required and optional information for the user to enter. The user 
enters the information by moving a cursor to a labeled input field and typing in 
the appropriate information (e.g., Buyer Name, Billing Address, etc.). As the 
retailer enters the information, the Client Program 215 reads and stores the 
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information. Fig. 6is a diagram of a typical input screen 600 displayed by an 
exemplary embodiment of the present invention. 

At step 330, the user causes the client 210 to generate final 
documents. After the user enters all of the required information, the MB 
Advantage Client Software 215 displays or enables a "Select Documents" icon 
610 (shown in Fig. 6). In response to the user selecting the "Select Documents" 
icon 610, the Client Program 215 displays a Document Generation screen. Fig. 
7 is a diagram of a typical document generation screen displayed by an 
exemplary embodiment of the present invention. The Document Generation 
screen 700 includes a status indicator 710 and a document list 720. At this 
state, the status indicator 710 indicates that the documents have not yet been 
generated. The document list 720 identifies each of the documents that will be 
generated for the identified contract type. The Document Generation screen 
700 also includes a "Generate" icon 730. The user may select the "Generate" 
icon to cause the Client Program 215 to generate final or executable 
documents. 

In response to selecting the "Generate" icon 730, the Client 
Program 215 (a) merges the information input by the retailer with document 
templates associated with the documents identified in the document list 720, (b) 
encrypts the documents, and (c) compresses and combines the documents into a 
single electronic file. After generating the documents, the Client Program 215 
updates the status indicator 710 of the Document Generation screen 700 to 
indicate that the client 210 contains the final documents and displays or enables 
"Sign" and "Check In" icons. Fig. 8 is a diagram of a typical document 
generation screen displayed by an embodiment of the present invention in this 
state. At this point, the final documents are ready for execution and cannot be 
modified. However, the final documents do not constitute a binding agreement 
at this point. 
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The Snt Program 215 encrypts the final documents pripr'to 
storingthem on the client 210. The input to the encryption procesyincludes the 
unencrypted final documents and a document encryption key^Phe Client 
Program 215 generates the document encryption key baseoyon a proprietary 
algorithm and a proprietary set of data. Those skilled in/me art will understand 
that a variety of techniques may be used to generate^ secure encryption key 
and it is not necessary to disclose the proprietary^gorithm used by MBCC to 
enable the present invention. The Client Progp4i 215 also generates an 
encryption key to be used for encrypting otfe or more signature files 
("Signature Key"). The signature files^ontain digital representations of the 
signatures of various parties. The Signature Key is based, at least in part, on 
the contents of the unencrypted final documents. Basing the Signature Key on 
the unencrypted final documents the prevents creation of fraudulent final 
documents. For instance, ifthe final documents are modified, then the Credit 
Highway can no longer generate the Signature Key. As a result, the Credit 
Highway can also no longer decrypt the signature files. Thus, the signature 
files become invalid if a party modifies the final documents. 

After generating the necessary keys, the Client Program 215 
encrypts the final documents and any signature files using the appropriate 
encryption keys. 

« The Client Program 215 combines the encrypted final documents 

and'the encrypted signature files into a single file and compresses the file using 
a commercially available compression program. Those skilled in the art will be 
aware of a variety of such compression algorithms and the present invention 
can be implemented using any such variety or by eliminating the compression 
step all together. In addition, those skilled in the art will understand that 
combining the final documents and signature files into a single file is only one 
possible-technique for storing and managing the files. Other embodiments may 



use multiple files^tore portions of the files into various other files. The 
Client Program 215 also password protects the compressed file using a 
proprietarily generated password. The decompressing of the compressed file 
requires the provision of this password. 

The Client Program 215 automatically stores the final documents 
on the client 210. The user may cause the Credit Highway to exit the 
Document Generation Phase 302 by either (a) logging off of the MB Advantage 
System or (b) entering the Document Execution Phase 304 as described below. 

The Client Program 215 will enter the Document Execution Phase 
304 from the Document Generation Phase 302 in response to the user selecting 
either the "Sign" icon 810 or the "Check In" icon 820. If the user selects the 
"Sign" icon 810, the Client Program 215 will enter the Document Execution 
Phase 304 at step 360. If the user selects the "Check In" icon 820, the Client 
Program 215 will enter the Document Execution Phase 304 at step 340. To 
enter the Document Execution Phase 304 at the beginning of a new session, as 
described above, an authorized user must gain access to the MB Advantage 
System, invoke the Credit Highway, complete the requirements of the 
Document Generation Phase 302 if necessary, and select either the "Sign" icon 
810 or the "Check In" icon 820. 

The Document Execution Phase 304 involves the client 210 and 
the server 1 10. In the Document Execution Phase 304, the user may invoke 
three functions: Check In final documents, Check Out final documents, or Sign 
final documents. After the final documents have been fully signed, the user 
may cause the Credit Highway to exit the Document Execution Phase 304. The 
user, utilizing the Credit Highway, completes these tasks by performing some 
or all of steps 340, 350, and 360 as illustrated in Fig. 3 and further described 
below. 
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At ste^?K), the user checks in the final documents. The check in 
process results in moving the encrypted and compressed final documents from 
the client 210 to the server 1 10 over communications medium 150. The user 
initiates the check in process by selecting the "Check In" icon 820 on the 
Document Generation screen 800. After performing the check in process, the 
Client Software 215 updates the status indicator 710 of the "Document 
Generation" screen to indicate that the server 1 10 contains the final documents. 
Fig. 9 is a diagram of a typical document generation screen displayed by an 
exemplary embodiment of the present invention in this state. 

At step 350, the user checks out the final documents. The user 
may invoke the check out process by selecting the "Check Out" icon 910 on the 
document generation screen 900. The check out process allows the user to 
retrieve the final documents from the server 1 10 for viewing, printing, or 
signing. If the final documents are not modified, then the user can perform the 
check in process to move the final documents back to the server 1 10 (See Fig. 
8). If the retailer modifies the checked out final documents, then the Client 
Program 215 will update the status indicator of the Document Generation 
screen to indicate that the documents have not been generated and force the 
user to regenerate the documents prior to performing the check in process (See 
Fig. 7). Thus, modifying the documents results in the Client Program 215 
returning to step 320 of the Document Generation Phase 302. 

At step 360, the user can initiate signing of the final documents. 
The Credit Highway allows electronic signing of the final documents. The user 
may initiate the signing process for the final documents prior to performing an 
initial check in process or subsequent to performing a check out process. The 
retailer initiates the signing process by selecting the "Sign" icon 810 on the 
Document Generation 800 screen. The Client Program 215 then displays on the 
computer screen 220 a list of signature types that may be required to fully 




execute the document. A party to the agreement initiates the signing of the 
final documents by selecting the appropriate signature type. In response to 
selecting a signature type, the Client Program 215 displays an Electronic 
Signature screen on the display 220. Fig. 10 is a diagram of a typical 
Electronic Signature screen 1000 displayed by an exemplary embodiment of 
the present invention in this state. 

While the Client Software Program 215 displays the Electronic 
Signature screen 1000, an executing party electronically signs the final 
documents using a signature input device 225 (as shown in Fig. 2). The Client 
Program 215 includes the software routines necessary to read the signature 
from the signature input device 225. As the party signs the document, the 
Client Program 215 reads the input from the signature input device 225 and 
displays the signature on the Electronic Signature screen 1000. Signature input 
devices compatible with the MB Advantage System include the Topaz System 
SignatureGem™ LCD tablets. After electronically signing the final documents 
and reviewing the displayed signature on the Electronic Signature screen 1000, 
the signing party may accept the electronic signature by selecting an "Accept" 
icon 1010 or reject the electronic signature by selecting a "Cancel" icon 1020, 
both displayed on the Electronic Signature screen 1000. 

The final documents typically require signatures from multiple 
parties including a prospective customer and a retailer. During a single 
signature session, each party to the agreement may electronically sign the final 
documents. However, it is not necessary that each of the parties concurrently 
sign the final documents. In between the performance of each signature, the 
Client Program 215 will encrypt the entered signatures using the Signature 
Key. Prior to each party signing the final documents, the retailer may perform 
the check in and check out process several times. 
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After^^h party to the agreement signs the final documents, the 
final documents are a fully executed contract ("Electronic Agreement") and 
Client Program 215 displays a document generation screen similar to the 
Document Generation screen 800 shown in Fig. 8. The user then performs a 
check in process by selecting the "check in" icon 820. In response to this 
action, the client program 215 displays a Document generation screen similar to 
Document Generation screen 900 in Fig. 9. The user may then select a 
"Submit" icon 920 displayed on the Document Generation screen 900 to 
indicate that the final documents are now fully executed. Selecting the 
"Submit" icon 920 results in the Client Program 215 transitioning to the 
Electronic Agreement Control Phase 306. 

The Electronic Agreement Control Phase 306 involves the client 
210 and the server 1 10. In response to the user selecting the "Submit" icon 
920, the Credit Highway will enter the Electronic Agreement Control Phase 
306 directly from the Document Execution Phase 304. To enter the Document 
Control Phase 306 at the beginning of a new session, a user must gain access to 
the MB Advantage System, invoke the Credit Highway, complete the 
requirements of the Document Generation Phase 302 if necessary, complete the 
requirements of the Document Execution Phase 304 if necessary, perform the 
check in process, and select the "Submit" icon 920. 

At step 370, the submit process is performed. The user may 
perform the submit process to submit the Electronic Agreement to headquarters 
for approval. The user initiates the submit process by selecting the "Submit" 
icon 920. After submitting an Electronic Agreement, no additional 
modifications, including adding any signatures, to the Electronic Agreement 
are permitted. A user can print copies of the Electronic Agreement by selecting 
the "Print" icon 930 on the Document Generation screen 900 or view the 
Electronic Agreement by selecting the "View" icon 940. 
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Fig. state diagram illustrating the operation of an 
embodiment of the present invention in creating and managing an electronic 
agreement. Fig. 4 illustrates four states that occur in creating an electronic 
agreement using an embodiment of the present invention. The Creating 
Electronic Document state 410 coincides with the Document Generation Phase 
302 in Fig. 3. As the user enters additional information or selects various 
options 412, processing remains in the Creating Electronic Document State 
410. Upon selecting the generate function 414, processing enters the Final 
Document On Client state 420. In the Final Document On Client state 420, the 
user may invoke the signing process 422 or the check in process 424. Invoking 
the signing process 422 allows one or more signatures to be entered prior to 
returning to the Final Document On Client state 420. Invoking the check in 
process 424 results in a transition to the Final Document On Server state 430. 
The Final Document On Client state 420 and the Final Document On Server 
state 430 correspond with the Document Execution Phase 304 in Fig. 3. While 
the Final Document On Server state 430 is active and after all of the required 
signatures have been entered, the user may invoke the submit process 434. In 
response to the invoking the submit process, the Electronic Agreement state 
440 is entered. In the Electronic Agreement state 440, the server 110 operates 
as the custodian of the authoritative copy of the electronic agreement. The 
Electronic Agreement state 440 corresponds with the Electronic Agreement 
Control Phase 306 in Fig. 3. 



^g£2\After the Electronic Agreement has^bej©n^£fansferred to the server 
1 10, the only authoritative copy of the Electronic Agreement is maintained on 
the database 120. Access to the Electronic Agreement is restricted to 
authorized users. The presen>mvention anticipates several techniques to 
satisfy the recommendations of the proposed UCC revisions. In one 
embodiment, the authoritative copy of the Electronic Agreement includes a 
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special header or text field that is encrypted with a separate encryption key. 
Any hard copies or electronic copies of the Electronic Agreement generated or 
created from the MB Advantage System will contain this special header of field 
in its encrypted state. Thus, these copies can be distinguished from the 
5 authoritative copy. In another embodiment, the MB Advantage System will 
add a notice to each printed or viewed copy of the Electronic Agreement 
indicating that the copy is not the authoritative copy of tffe Electronic 
Agreement. In yet another embodiment, the MB Advantage System maintains 
at all times the location of the authoritative copy ofrflie Electronic Agreement 
10 by recording the user creating the document or the user that checked out the 
document last. In this embodiment, the Server/Software 1 15 maintains the 
identity of the authoritative copy of the Elepfronic Agreement. 

From the foregoing description, it will be appreciated that the 
present invention provides a system and a method for creating and controlling 
15 electronic agreements. In general, the system includes a server and at least one 
client interconnected through a communications medium. In operation, the 
system only allows access to authorized users. Once a user gains access, the 
user inputs commands and data that are necessary to create an electronic 
document. Upon completion of the electronic document, the user can invoke a 
20 signature process. During the signature process, the parties to the agreement 
enter electronic signatures. The present invention operates to encrypt the 
electronic document and then encrypts each of the signatures using an 
encryption key that is based, at least in part, on the contents of the electronic 
document. This aspect of the system prevents the propagation of fraudulent 
25 versions of the electronic document because any modifications to the electronic 
document will invalidate the encrypted signatures. Finally, the system operates 
to transfer the electronic agreement to a secure server. The electronic 
documents are considered an electronic agreement once they have been 



21 



executed. The elecironic agreement is then controlled by transferring the 
electronic agreement to the server. The server maintains the authoritative copy 
of the electronic agreement, thereby providing control of the electronic 
agreement. 

5 Therefore, it can be seen that the present invention provides a 

system and method to provide for the control of an electronic chattel paper that 
meets some or all of the requirements proposed in the modifications to the 
UCC. The present invention also provides a system and method to create 
electronic agreements in a distributed environment, but maintains the ability to 

10 identify the party having control of the authoritative copy of the electronic 
agreement. 

The present invention may be conveniently implemented in one or 
more program modules. No particular programming language has been 
indicated for carrying out the various tasks described above because it is 

15 considered that the operation, steps, and procedures described in the 

specification and illustrated in the accompanying drawings are sufficiently 
disclosed to permit one of ordinary skill in the art to practice the instant 
invention. Moreover, in view of the many different types of computers and 
program modules that can be used to practice the instant invention, it is not 

20 practical to provide a representative example of a computer program that would 
be applicable to these many different systems. Each user of a particular 
computer would be aware of the language and tools which are more useful for 
that user's needs and purposes to implement the instant invention. 

The present invention has been described in relation to particular 

25 embodiments which are intended in all respects to be illustrative rather than 
restrictive. Those skilled in the art will understand that the principles of the 
present invention may be applied to, and embodied in, various program 
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modules for execution on differing types of computers regardless of the 
application. 

Alternative embodiments will become apparent to those skilled in 
the art to which the present invention pertains without departing from its spirit 
and scope. Accordingly, the scope of the present invention is described by the 
appended claims and supported by the foregoing description. 
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